If you discover a security vulnerability, please do not open a public issue.

Instead, please report it by emailing the maintainer directly. You can find contact information on the GitHub profile.

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial assessment: Within 1 week
• Fix timeline: Depends on severity

This boilerplate includes sensitive components:

• JWT Authentication: Ensure JwtSettings:Secret is stored securely (use Secret Manager or environment variables in production)
• Email Handler: SMTP credentials (COREFX_SMTP_PWD) should never be committed to source control
• HTTPS: Always use HTTPS in production environments